Thanks for the quick response.
Fajar A. Nugraha wrote:
Are you scanning all email?
Not outgoing mail (from our users), but all incoming mail, yes. The
message size limit in qmail was set to 15MB, with the clamd.conf limits
set at 10MB. I noticed that when clamd was pegged, the clamav
directories were almost all using 10MB of disk space.
Scanning large emails (e.g over 10MB) needs quite a lot of resource, and
if your system receives lots of them, the load can increase greatly. If
you have slow CPU, or handle lots of email traffic, it might be useful
to tell simscan to only scan emails < 1 MB.
I did 2 things:
1) Lowered the incoming file size limit to 1MB for now
2) Recompiled clamd and clamdscan with the -static argument to gcc to
force the clamav library to be compiled statically (as suggested on this
list to solve CPU saturation).
I'm not sure if one or both of these things solved the problem, but
currently CPU usage for clamd is back to normal. I will be
experimenting with raising the file size limit and see if the problem
resurfaces.
Regards,
Bill Shupp
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
